git-scm vulnerabilities (CVE)

CVE records published for git-scm, newest first. Follow to get an email when a new one appears.

3 results
7.5High
CVE-2026-105437

Heap-based Buffer Overflow in Git

Git Git

Affected versions of Git have a heap buffer overflow in the three-way merge code (xdiff), which an attacker can trigger through a repository they control. When Git merges a file, it first adds up the size of the merged output, allocates a buffer of that size…

7.0High
CVE-2023-29007

Arbitrary configuration injection via `git submodule deinit`

git git

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, a specially crafted `.gitmodules` file with submodule URLs that are longer than 1024 characters can used to exploit…

5.6%EPSS